diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index a0740f0..6f6843f 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -17,7 +17,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+      uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
     - name: Verify Action
       run: actionlint -ignore 'unexpected key "description" for "workflow" section' -ignore 'nexpected key "inputs" for "workflow" section.' -ignore 'unexpected key "runs" for "workflow" section.' -ignore '"on" section is missing in workflow' -ignore '"jobs" section is missing in workflow' action.yml
     - name: tag latest after success
diff --git a/action.yml b/action.yml
index d5ed9e6..2e4681d 100644
--- a/action.yml
+++ b/action.yml
@@ -29,7 +29,7 @@ runs:
   steps:
       - name: Checkout repository
         if: ${{ inputs.checkout == 'true' }}
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
         with:
           fetch-depth: '0'
       - name: Bump version and push tag